Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76696d8d-fd33-36a8-ae26-d98c250ca4d8.roa
File: 76696d8d-fd33-36a8-ae26-d98c250ca4d8.roa (raw, json)
Hash identifier: fGNQsU0MSU7j6OzQid6ar+HnRJjs0kQa/9VuB/wbf90=
Subject key identifier: 48:3A:99:81:EA:BB:E2:4C:2E:AD:0C:41:79:D0:23:60:87:0C:EE:C9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332E10A6B0041AB17DBF800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76696d8d-fd33-36a8-ae26-d98c250ca4d8.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 65.37.128.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:e1:0a:6b:00:41:ab:17:db:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=c01033be-e216-4b4a-b3c6-d389cedc5589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:0f:13:86:e1:21:54:f2:eb:e6:f9:7e:e3:
45:63:27:5c:7b:a5:13:11:74:e1:64:bf:12:d2:62:
ca:78:2e:d5:4a:6e:bc:47:74:c9:45:1e:26:f1:23:
38:1b:e5:06:ce:f5:9b:9b:ea:88:23:67:58:aa:95:
b0:aa:1b:77:0a:28:0d:f8:5e:cc:a0:b6:d6:b2:b2:
bc:c3:ce:62:a8:e0:fb:a2:fa:1b:94:26:92:3f:b1:
bd:30:79:9d:36:01:42:0e:4f:93:24:c3:9d:ed:97:
d2:e7:c1:b7:19:0e:1a:ae:17:bb:0d:d3:e5:21:47:
06:56:9a:10:69:c2:8f:03:d1:18:c3:3a:1d:b6:0b:
1a:ba:6c:12:b6:e9:f5:b9:80:cb:58:e1:8a:fe:3f:
a5:80:b1:c3:c8:9b:7b:ba:3b:ff:b4:f5:38:2d:d4:
e8:d1:cc:00:3f:03:62:1f:f6:39:b3:55:63:d6:d1:
20:06:e9:f4:44:28:bb:87:36:8e:74:23:d2:22:d3:
05:0c:29:c2:01:09:97:43:6f:5d:31:cb:84:79:ed:
69:2d:00:21:26:26:fb:98:24:61:11:ba:c1:11:d8:
7f:46:96:2c:bc:f3:83:64:82:36:b0:05:a6:3b:13:
5a:d2:82:65:e5:4f:2a:ba:3b:68:eb:55:c2:17:52:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3A:99:81:EA:BB:E2:4C:2E:AD:0C:41:79:D0:23:60:87:0C:EE:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76696d8d-fd33-36a8-ae26-d98c250ca4d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.37.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:de:66:b3:c7:08:35:ec:cf:8e:6c:18:01:eb:a4:e3:90:8b:
16:ca:29:f4:72:a6:b4:0d:35:b1:a4:32:27:d4:da:80:c9:a6:
70:5d:3c:0c:db:6f:05:78:e9:73:f1:d0:a0:85:21:e1:10:92:
60:28:64:c1:ab:8b:b0:7e:57:5e:f9:05:4b:ae:64:02:a4:a3:
00:00:9c:a8:10:38:88:42:93:33:e5:4c:dc:99:39:ca:84:6a:
10:f3:bb:8f:45:4f:69:c2:d1:c5:ab:6a:df:b7:97:12:87:c6:
98:6e:c5:fc:79:86:1e:d7:14:86:e1:08:34:58:5d:05:f6:99:
2a:e0:cf:5f:08:cf:3b:59:5b:4c:7b:e7:40:cf:78:43:ad:a2:
fe:47:9f:13:ce:53:dd:70:c6:2f:e6:6f:5f:0b:d1:c5:5b:12:
a7:18:c6:49:8a:03:14:25:31:71:9f:c0:51:de:b3:83:b8:37:
69:24:63:f0:0b:86:c6:36:33:5c:a7:4b:6c:db:05:a6:02:c7:
3a:d3:c1:6c:18:ba:97:11:e2:3d:97:df:4a:4f:28:f7:6c:16:
f9:37:b4:ea:83:77:0d:21:43:70:a6:06:8a:5a:50:96:99:6b:
22:07:80:ed:06:61:33:c0:d5:72:ec:e0:85:63:68:37:ff:35:
bc:1d:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:45:47 2025 by rpki-client